$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c9f7dbd2-1c7e-42e8-a7f9-00bd76e70248.roa File: c9f7dbd2-1c7e-42e8-a7f9-00bd76e70248.roa (raw, json) Hash identifier: rOx2F0HJnnrw0gFPS0OEu+LfpsDsXEfr2hIyzp3gjXc= Subject key identifier: 59:AF:8D:B0:6F:DB:30:E8:42:C3:D8:BB:BE:68:8D:B5:9E:C3:84:32 Certificate issuer: /CN=A91CD28A0000/serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Certificate serial: 78D6E12AA1C1FD3DF1BFAE0B2D4719B8342BC886 Authority key identifier: 97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c9f7dbd2-1c7e-42e8-a7f9-00bd76e70248.roa Signing time: Tue 04 Aug 2026 00:00:27 +0000 ROA not before: Tue 04 Aug 2026 00:00:27 +0000 ROA not after: Mon 02 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 240f:80ff:40c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/manifest.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Aug 2026 00:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d6:e1:2a:a1:c1:fd:3d:f1:bf:ae:0b:2d:47:19:b8:34:2b:c8:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD28A0000, serialNumber=97EBF348F376B867FC76B2B2B91078C3DD494883 Validity Not Before: Aug 4 00:00:27 2026 GMT Not After : Nov 2 23:59:59 2026 GMT Subject: serialNumber=3ba7b4c6d54921bbefd0a7d40b273e2878f5c85cc193a84738c8954e32089bcf, CN=4257e925-715f-47a2-893e-0e3f97ec7e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:01:f1:1a:b4:26:fc:74:0f:ae:af:fd:f0:f9: ff:65:70:2f:67:38:d3:c6:a8:d6:60:da:6a:84:0f: 4f:32:a8:fc:3e:25:1f:ef:87:1b:d2:61:b5:e1:bf: f3:5b:dc:5c:49:26:06:93:3b:06:9e:d0:0f:b8:43: a6:b9:d8:e2:b1:d9:03:0f:58:bb:d3:5f:f1:9f:15: 73:79:15:d8:8b:cc:7b:6d:ae:08:99:f4:aa:38:01: 3b:ed:69:34:ba:f2:5b:d1:ce:cc:69:f3:97:6f:28: 57:6f:b3:23:4b:7b:10:89:47:df:5b:2b:e6:17:14: 6f:b9:d1:cd:02:b7:3e:e9:f9:7d:cc:de:86:23:8f: 35:29:a4:05:95:d3:8f:c6:2b:e6:26:ca:ff:76:0d: 75:1e:b0:5d:1b:9e:35:c1:7f:8c:a6:e6:23:23:13: 30:12:c0:57:84:ea:16:99:ec:1e:e0:33:b3:fc:c6: 55:41:40:3b:3c:42:fe:a3:88:32:14:bb:41:1a:14: 8b:7b:a0:e3:09:be:4f:b7:61:ac:c9:8e:a0:25:96: 68:71:6e:06:95:ed:15:24:24:fe:ee:ea:f5:bf:3b: b7:2b:9a:71:03:c5:f6:7a:12:f7:cd:09:27:5e:79: 6b:e9:d1:f5:65:e9:aa:2d:2b:aa:dc:44:5f:f6:75: a2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AF:8D:B0:6F:DB:30:E8:42:C3:D8:BB:BE:68:8D:B5:9E:C3:84:32 X509v3 Authority Key Identifier: keyid:97:EB:F3:48:F3:76:B8:67:FC:76:B2:B2:B9:10:78:C3:DD:49:48:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l-vzSPN2uGf8drKyuRB4w91JSIM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/c9f7dbd2-1c7e-42e8-a7f9-00bd76e70248.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c3cd7c24-12cb-4abc-8fd2-5e2bcbb85ae6/90ca90a9-a10a-44e7-82b9-1365746ba55e.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240f:80ff:40c0::/48 Signature Algorithm: sha256WithRSAEncryption 8d:2f:4b:c5:13:8e:30:be:d8:c6:dd:e7:70:09:4a:9c:df:45: 50:a9:24:b3:d2:d6:31:a6:1d:95:e1:43:a9:1d:d8:db:31:fa: e4:7b:fd:c5:34:23:a8:cb:7b:71:12:54:df:5f:42:4a:9f:05: 7a:56:e8:fe:b0:05:29:26:d8:87:43:28:71:58:59:f8:78:f8: 70:c1:3a:e6:d7:1f:2a:36:11:f7:98:62:89:e9:03:61:68:46: cd:c8:cb:14:12:57:7d:0f:ee:dc:3f:b5:7d:73:75:fe:5b:20: dd:e0:30:2c:4a:50:5d:d9:8d:a2:90:04:d3:52:19:8c:8c:7c: fd:c3:d1:0b:1f:90:00:15:94:b4:99:81:ca:88:a1:8d:b6:40: 61:e8:f9:11:a5:c5:bd:c9:a5:a5:c6:0e:21:22:a4:63:3f:8e: bf:8d:cd:b7:c0:76:c7:76:d6:d0:39:2a:7d:b5:08:d9:ce:bc: 21:72:4a:57:84:26:33:31:6b:3a:7a:1d:5d:81:29:90:1e:cd: dd:8c:3a:9f:93:3e:c8:79:46:3d:b0:15:ad:14:fb:2d:f0:b8: 03:27:3c:60:d2:6c:7a:8f:63:fe:61:a1:48:13:1a:20:e4:7b: c6:72:d6:4d:3e:b7:da:25:87:5e:43:89:2e:7a:07:48:15:d6: 96:1f:1b:20 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUeNbhKqHB/T3xv64LLUcZuDQryIYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQ0QyOEEwMDAwMTEwLwYDVQQFEyg5N0VCRjM0OEYz NzZCODY3RkM3NkIyQjJCOTEwNzhDM0RENDk0ODgzMB4XDTI2MDgwNDAwMDAyN1oX DTI2MTEwMjIzNTk1OVowejFJMEcGA1UEBRNAM2JhN2I0YzZkNTQ5MjFiYmVmZDBh N2Q0MGIyNzNlMjg3OGY1Yzg1Y2MxOTNhODQ3MzhjODk1NGUzMjA4OWJjZjEtMCsG A1UEAxMkNDI1N2U5MjUtNzE1Zi00N2EyLTg5M2UtMGUzZjk3ZWM3ZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgHxGrQm/HQPrq/98Pn/ZXAvZzjT xqjWYNpqhA9PMqj8PiUf74cb0mG14b/zW9xcSSYGkzsGntAPuEOmudjisdkDD1i7 01/xnxVzeRXYi8x7ba4ImfSqOAE77Wk0uvJb0c7MafOXbyhXb7MjS3sQiUffWyvm FxRvudHNArc+6fl9zN6GI481KaQFldOPxivmJsr/dg11HrBdG541wX+MpuYjIxMw EsBXhOoWmewe4DOz/MZVQUA7PEL+o4gyFLtBGhSLe6DjCb5Pt2GsyY6gJZZocW4G le0VJCT+7ur1vzu3K5pxA8X2ehL3zQknXnlr6dH1ZemqLSuq3ERf9nWibwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFmvjbBv2zDoQsPYu75ojbWew4QyMB8GA1UdIwQY MBaAFJfr80jzdrhn/HaysrkQeMPdSUiDMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9sLXZ6U1BO MnVHZjhkckt5dVJCNHc5MUpTSU0uY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvYzNjZDdjMjQtMTJjYi00YWJjLThmZDItNWUyYmNiYjg1YWU2 L2M5ZjdkYmQyLTFjN2UtNDJlOC1hN2Y5LTAwYmQ3NmU3MDI0OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9jM2NkN2MyNC0xMmNiLTRhYmMtOGZkMi01ZTJi Y2JiODVhZTYvOTBjYTkwYTktYTEwYS00NGU3LTgyYjktMTM2NTc0NmJhNTVlLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJA+A/0DAMA0GCSqGSIb3DQEBCwUAA4IBAQCNL0vFE44wvtjG3edw CUqc30VQqSSz0tYxph2V4UOpHdjbMfrke/3FNCOoy3txElTfX0JKnwV6Vuj+sAUp JtiHQyhxWFn4ePhwwTrm1x8qNhH3mGKJ6QNhaEbNyMsUEld9D+7cP7V9c3X+WyDd 4DAsSlBd2Y2ikATTUhmMjHz9w9ELH5AAFZS0mYHKiKGNtkBh6PkRpcW9yaWlxg4h IqRjP46/jc23wHbHdtbQOSp9tQjZzrwhckpXhCYzMWs6eh1dgSmQHs3djDqfkz7I eUY9sBWtFPst8LgDJzxg0mx6j2P+YaFIExog5HvGctZNPrfaJYdeQ4kuegdIFdaW Hxsg -----END CERTIFICATE-----Generated at Sat Aug 15 08:27:28 2026 by rpki-client